Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File:                     1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier:          v86B+O2RaoeTR8Er/Q6cIPqDt02V15odkRXptTuJBcU=
Subject key identifier:   8E:BC:5C:8F:C0:A7:23:8D:EC:EC:1B:78:C2:42:FB:37:B5:0C:3F:1E
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer:       /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial:       01901CA14F753784DC093215D8B326D0F80F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number:          11CD
Signing time:             Sat 15 Jun 2024 16:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:51 +0000
Files and hashes:         1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: WvZO2IS9qcO/wTleETQ/e3rRVYh5hmnz2Habw0K1iBI=)
                          2: ZRi96_Jcu83-Ta6mxUZyJLpwhgs.roa (hash: pr9oMhGcNDQD5DsxPXgarMsStPLgDetpXwbn9zwElF0=)
                          3: aclLQnt_Q3nEsaOQmDEZoZTM8qk.roa (hash: luLxkBrn5YFSKobUXnSl/eCXQ21ihlSRwskLwk4YXuo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:4f:75:37:84:dc:09:32:15:d8:b3:26:d0:f8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
        Validity
            Not Before: Jun 15 16:00:51 2024 GMT
            Not After : Jun 16 16:00:51 2024 GMT
        Subject: CN=8ebc5c8fc0a7238decec1b78c242fb37b50c3f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:d3:27:1b:e6:a4:a1:11:0d:df:bb:52:73:
                    13:3d:35:f6:e3:69:af:32:89:83:80:96:ac:ae:63:
                    1b:60:91:53:8c:bb:c7:a8:a5:5b:09:46:60:b7:fe:
                    0b:d9:f0:f9:60:36:7a:8b:25:60:b5:a3:90:d0:68:
                    f6:bb:89:ed:12:15:76:f4:45:77:be:0a:4e:bb:5d:
                    a0:b6:11:ca:76:be:62:62:8d:da:75:24:42:9e:6d:
                    92:d8:d7:17:83:dd:07:3d:2f:cb:dc:53:a3:39:9f:
                    3b:ce:b2:b4:65:64:28:50:fc:3f:de:f5:d5:22:23:
                    ba:ba:d6:f6:c8:61:4b:0d:5c:0f:8c:f4:91:7c:0b:
                    66:13:8f:9b:ed:f9:65:c1:82:28:c8:43:90:d2:19:
                    41:66:c2:03:4a:c1:da:47:ad:55:9c:e9:dd:b6:f4:
                    f1:f3:a3:f0:b9:ab:27:46:17:92:1d:ee:1a:07:4f:
                    66:f5:19:52:fd:b8:0e:c3:8c:98:e4:5a:1e:24:9e:
                    2f:98:9d:6d:4c:bf:b0:07:6d:f8:1f:12:09:d2:23:
                    31:44:22:e0:4c:65:9d:3d:8f:8c:32:55:13:87:70:
                    1d:8e:55:23:76:25:0f:ea:ef:eb:4f:d9:a9:c9:ae:
                    34:58:e3:20:7a:2c:a8:f5:9c:de:b7:a6:a5:8d:01:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BC:5C:8F:C0:A7:23:8D:EC:EC:1B:78:C2:42:FB:37:B5:0C:3F:1E
            X509v3 Authority Key Identifier:
                keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:87:6a:2a:60:d0:ca:6e:42:49:25:37:ff:9b:db:01:d3:
         0b:f3:b9:8f:bf:29:97:5e:4e:35:57:4a:ac:c4:06:33:ad:90:
         46:7d:1f:0a:db:a9:27:8f:48:c6:c0:ad:31:4a:04:10:9f:b1:
         4e:66:a1:e8:cd:93:0a:40:96:09:24:c7:f8:b5:b5:96:ea:a1:
         a0:76:a2:1e:4f:5b:e1:99:64:57:ab:0c:ab:93:17:d8:6d:49:
         af:88:8e:60:17:b0:bd:c4:67:8f:d4:84:0b:35:4f:7c:fd:f8:
         41:07:06:03:2c:07:64:1d:5c:09:aa:c1:cf:34:1c:69:0f:e3:
         01:16:d2:bc:74:b5:35:8c:24:d2:d3:90:23:81:aa:52:28:34:
         71:07:de:96:ba:68:1f:65:03:19:63:65:de:77:6c:9c:c7:1b:
         7a:c8:c8:0e:96:53:74:37:a3:af:ca:90:d6:52:11:c6:93:38:
         6b:e2:dc:50:e5:c6:fb:a0:9f:c5:19:99:10:af:37:d1:28:0d:
         82:76:fd:fb:39:26:59:aa:7c:db:4e:20:c5:a3:04:3e:8c:36:
         37:38:af:7c:a7:69:01:dc:44:ca:8d:30:0e:8e:8e:b4:cf:bc:
         71:05:4c:5c:ea:e9:66:f5:f7:0a:88:ca:52:a1:ac:03:af:c5:
         ce:8c:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:20:43 2024 by rpki-client on console-ams.rpki-client.org